Invoke-WMICommand

GPTKB entity

Statements (14)
Predicate Object
gptkbp:instanceOf PowerShell cmdlet
gptkbp:canBe lateral movement
remote code execution
gathering system information
gptkbp:category Windows management
https://www.w3.org/2000/01/rdf-schema#label Invoke-WMICommand
gptkbp:partOf PowerShell module
gptkbp:requires gptkb:PowerShell
WMI access
gptkbp:usedBy system administrators
penetration testers
gptkbp:usedFor executing WMI commands on remote computers
gptkbp:bfsParent gptkb:APT33
gptkbp:bfsLayer 6